CVE-2020-1986CWE-20

Secdo: Local authenticated users can cause Windows system crash

Medium · published April 8, 2020

CVSS v3.1
5.5
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:\) to cause a system crash on every login. This issue affects all versions Secdo for Windows.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-04-08T18:41Z
EPSS history
Timeline
  • 08 APR 18:41Z
    Secdo: Local authenticated users can cause Windows system crash
    cvelistv5